> Security & trust
Enterprise-grade security for frontline safety data
Incident reports, worker locations and training records are sensitive. SafetyIQ protects them with ISO 27001 certified processes, encryption everywhere, and hosting on Microsoft Azure, so your IT and security teams can sign off with confidence.
> Defense in depth
Six layers between your data and everyone else
Security isn't one feature. It's a set of controls that each have to fail before your data is at risk.
Independent testing
Third-party penetration testing every year, plus internal and external reviews of our controls.
Monitoring & response
All system access is logged, events are monitored in real time, and a 24×7 process responds to security and privacy events.
Infrastructure
Hosted on Microsoft Azure and replicated across 2 availability zones, with access controlled through Azure identity and access management.
Access control
Role-based permissions for your users, with 4 permission levels and single sign-on through Active Directory. Our staff access production data only as their role requires.
Encryption
TLS 1.2 and above with 2048-bit keys in transit. All database information encrypted at rest.
Your data
Incidents, inspections, journeys, locations and training records, at the center of every layer.
> The details
What your security review will want to know
The specifics, taken from our published Data Security Statement.
Primary hosting in North America and Australia (Sydney). Azure infrastructure is SOC 2 and ISO 27001 compliant.
Infrastructure is replicated and distributed across 2 distinct Azure availability zones for resilience.
Full database backups run at least once a day, and backups are tested.
If a breach occurs, affected customers are notified within 72 hours of it being identified and assessed.
Customer data records are retained for 6 years from the entry date, in line with our Data Security Statement.
SafetyIQ does not store, process or collect credit card information. Payments run through PCI-compliant processors.
Microsoft Azure, Google and Twilio. No surprises in your vendor risk review.
Built to align with GDPR, UK privacy law and the Australian Privacy Act, to support global operations.
All system interaction, page views and access to the SafetyIQ software are logged and monitored.
> Worker privacy
Location tracking your crews can trust
Journey management and lone worker safety depend on location data, and your people deserve to know how it's used. SafetyIQ asks workers for clear, informed consent before background location tracking is switched on.
- ✓Consent-driven background location
- ✓Role-based access to worker data
- ✓Every view and change logged
> For your security review
Everything procurement will ask for
Published
Data Security Statement
Certifications, hosting, encryption, backups, incident response and retention.
Published
Privacy & Security Policy
How we collect, use and protect personal information.
On request
GDPR checklist
Our GDPR checklist, available on request for your privacy review.
On request
Security questionnaire
Send us your vendor security questionnaire and our team will complete it.
> FAQ
SafetyIQ security FAQs
Is SafetyIQ ISO 27001 certified?
Yes. SafetyIQ Management Solutions Pty Ltd has been ISO 27001 accredited since October 2021, and its controls are aligned with SOC 2.
Where is SafetyIQ data hosted?
SafetyIQ is hosted on Microsoft Azure, with Australia (Sydney) as the primary location and North American hosting available to meet data residency requirements. Infrastructure is replicated across 2 Azure availability zones.
Is my data encrypted?
Yes. All interactions with SafetyIQ are encrypted in transit with TLS 1.2 and above and 2048-bit keys, and all database information is encrypted at rest.
How are backups handled?
Full database backups run at least once a day, and backups are tested.
Does SafetyIQ do penetration testing?
Yes. SafetyIQ engages third-party penetration testing services every year.
How quickly will we be told about a breach?
SafetyIQ runs 24×7 coverage for security and privacy events and notifies affected customers within 72 hours of a breach being identified and assessed.
Does SafetyIQ support single sign-on?
Yes. SafetyIQ supports single sign-on through Active Directory, and user permissions are role-based.
Which subprocessors does SafetyIQ use?
SafetyIQ's subprocessors are Microsoft Azure, Google and Twilio.
> Security review
Bring your security questionnaire
Our team will walk your IT and security leads through our controls, documentation and data residency options, alongside a demo built around your sites.
Talk to our teamGet a demo built around your sites, your teams, and the way your people work.
EHS, journey, and fatigue management software for field-heavy teams.
.png){kind=logo}
.png)